CVE-2016-6824 - OpenCVE

Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service (device restart) via crafted CAPWAP packets.

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

AV:N/AC:L/Au:S/C:N/I:N/A:C

Vendors & Products
CPE Configurations

Vendors	Products
Huawei	Acu2 Acu2 Firmware Ac6605 Firmware Ac6005 Ac6605 Ac6005 Firmware Ac6003 Firmware Ac6003

Configuration 1 [-]

AND

OR	cpe:2.3:o:huawei:ac6003_firmware::::::::
	cpe:2.3:o:huawei:ac6003_firmware::::::::
	cpe:2.3:o:huawei:ac6005_firmware::::::::
	cpe:2.3:o:huawei:ac6005_firmware::::::::
	cpe:2.3:o:huawei:ac6605_firmware::::::::
	cpe:2.3:o:huawei:ac6605_firmware:v200r006c00:::::::*
	cpe:2.3:o:huawei:acu2_firmware::::::::
	cpe:2.3:o:huawei:acu2_firmware::::::::

OR	cpe:2.3:h:huawei:ac6003:-:::::::*
	cpe:2.3:h:huawei:ac6005:-:::::::*
	cpe:2.3:h:huawei:ac6605:-:::::::*
	cpe:2.3:h:huawei:acu2:-:::::::*

References

Link	Resource
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-ac-en	VDB Entry
http://www.securityfocus.com/bid/92506	Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2016-09-22T15:00:00

Updated: 2016-09-22T14:57:02

Reserved: 2016-08-16T00:00:00

Link: CVE-2016-6824

JSON object: View

NVD Information

Status : Analyzed

Published: 2016-09-22T15:59:07.443

Modified: 2016-09-22T17:26:39.827

Link: CVE-2016-6824

JSON object: View

Redhat Information

No data.

CWE

CWE-20

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:ac6003_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9F19F953-42DA-4268-82F9-882832CDC0DD", "versionEndIncluding": "v200r005c10", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:ac6003_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "746998C5-5D0A-4B04-9B7E-100B3E29E1BB", "versionEndIncluding": "v200r006c00", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:ac6005_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4326174E-9187-49A0-AB05-B450B6C53F31", "versionEndIncluding": "v200r005c10", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:ac6005_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3B78B3D8-AEF9-4529-8C98-0C1A5C1EFB27", "versionEndIncluding": "v200r006c00", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:ac6605_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8AB7F764-5246-495B-B342-8D4C8168670B", "versionEndIncluding": "v200r005c10", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:ac6605_firmware:v200r006c00:*:*:*:*:*:*:*", "matchCriteriaId": "BEDF9639-FC4A-4749-9AF7-E7FBCF4147B2", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:acu2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5F0E0490-ADDB-410C-9C76-A10733AB682D", "versionEndIncluding": "v200r005c10", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:acu2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AC142E9C-C281-42DC-B254-6AC7D6B12855", "versionEndIncluding": "v200r006c00", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:huawei:ac6003:-:*:*:*:*:*:*:*", "matchCriteriaId": "50521400-DB04-4EA9-A98D-A9A893E8054F", "vulnerable": false}, {"criteria": "cpe:2.3:h:huawei:ac6005:-:*:*:*:*:*:*:*", "matchCriteriaId": "3681DA94-7184-4DC6-BD73-FCE2DB808F07", "vulnerable": false}, {"criteria": "cpe:2.3:h:huawei:ac6605:-:*:*:*:*:*:*:*", "matchCriteriaId": "BA1E5AE5-EBB2-4E05-A3C7-E2CA54205FF7", "vulnerable": false}, {"criteria": "cpe:2.3:h:huawei:acu2:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF525629-AD0D-4CDC-A979-712C841FF7C6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service (device restart) via crafted CAPWAP packets."}, {"lang": "es", "value": "Controladores de acceso Huawei AC6003, AC6005, AC6605 y ACU2 con software en versiones anteriores a V200R006C10SPC200 permite a usuarios remotos autenticados provocar una denegaci\u00f3n de servicio (reinicio de dispositivo) a trav\u00e9s de paquetes CAPWAP manipulados."}], "id": "CVE-2016-6824", "lastModified": "2016-09-22T17:26:39.827", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.8, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-09-22T15:59:07.443", "references": [{"source": "cve@mitre.org", "tags": ["VDB Entry"], "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160817-01-ac-en"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://www.securityfocus.com/bid/92506"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}